From e0fc5036ee52cd5df32ce068072a73a590aaea44 Mon Sep 17 00:00:00 2001 From: Andrew Morton Date: Thu, 12 Feb 2004 23:47:21 -0800 Subject: [PATCH] [PATCH] Fix fadvise() parameter checking From: Ulrich Drepper The len parameter for fadvise has a signed type and negative values passed must be rejected. The attached patch does the job. --- mm/fadvise.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/mm/fadvise.c b/mm/fadvise.c index 40b40b0be3e9..d20bf2a93064 100644 --- a/mm/fadvise.c +++ b/mm/fadvise.c @@ -33,7 +33,7 @@ asmlinkage long sys_fadvise64_64(int fd, loff_t offset, loff_t len, int advice) return -EBADF; mapping = file->f_mapping; - if (!mapping) { + if (!mapping || len < 0) { ret = -EINVAL; goto out; } -- 2.39.5